Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/f110b177-91f0-3d3e-8955-10231347c49e.roa
File:                     f110b177-91f0-3d3e-8955-10231347c49e.roa (raw, json)
Hash identifier:          6v3BkWolRcKlhr8oUnDx45EcMK8QWG9bX3NnOpoV7kY=
Subject key identifier:   F2:17:BE:7A:77:0C:5A:C5:8D:21:E9:79:5A:03:0E:27:FB:77:65:59
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F4328584D7A0524954ECFF3CEA10DF040
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/f110b177-91f0-3d3e-8955-10231347c49e.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     21976
IP address blocks:        130.156.4.0/24 maxlen: 24
                          130.156.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:24:95:4e:cf:f3:ce:a1:0d:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=682c75b8-e2ad-4d55-b90c-28124b7824af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cb:44:3a:ed:7e:9c:d7:cc:00:a6:66:c1:37:
                    dc:4f:6a:14:81:4c:04:a6:dc:f8:70:cc:7b:7d:6c:
                    77:1b:d4:1d:f0:47:f6:1e:39:9d:db:3a:cc:dd:e7:
                    fc:aa:3b:a0:33:9a:3c:f6:82:57:59:3d:89:dd:48:
                    6c:06:3f:c0:66:55:c9:48:8a:35:e0:77:8b:5e:9d:
                    b1:c0:eb:a6:00:83:54:91:e7:7f:e1:d9:30:07:2a:
                    d4:4f:a5:f8:14:19:ed:d6:4d:47:f4:4e:01:37:58:
                    19:0e:a9:a9:e0:ea:f1:ad:25:65:7a:82:d9:f7:dc:
                    a0:71:a4:90:6a:09:af:24:99:79:1f:69:d1:e9:59:
                    39:66:72:d0:9d:02:9b:93:ac:25:ba:9f:9d:5d:fe:
                    8a:9d:52:22:9f:60:ea:c2:29:36:f9:b2:a4:5b:15:
                    6c:c8:8d:5a:c0:ba:8c:fc:2b:98:e5:d3:e9:b7:31:
                    79:32:d0:75:3b:cf:0f:31:f7:1f:7d:2f:5f:ba:6d:
                    de:71:dd:65:8a:94:ff:fe:62:0d:48:d9:7d:77:65:
                    af:51:d8:73:b0:12:9b:b8:0b:3b:58:7c:84:6b:a6:
                    f3:73:48:fa:10:77:b7:55:6f:1e:56:6c:4e:c2:22:
                    d2:1d:9a:8b:10:15:45:21:e8:33:bb:70:82:a0:16:
                    44:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:17:BE:7A:77:0C:5A:C5:8D:21:E9:79:5A:03:0E:27:FB:77:65:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/f110b177-91f0-3d3e-8955-10231347c49e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.156.4.0/24
                  130.156.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:11:d9:5a:66:05:ef:fa:17:78:7f:e0:32:97:f6:f3:19:d9:
         89:1e:54:af:2e:bc:58:95:37:2b:38:8e:a1:12:78:64:d5:54:
         6a:b2:ac:e2:54:1e:7e:b1:2e:7d:0e:52:bd:0a:80:9a:d8:bf:
         79:83:8b:0e:f9:15:53:ed:35:c4:b3:95:b2:c9:c5:45:c7:32:
         37:6d:ea:fd:cc:14:3d:5e:a4:57:45:e4:db:f5:48:70:1f:53:
         9c:69:a3:bc:36:2f:e4:8d:d7:7d:42:bc:b2:01:e2:36:4b:38:
         eb:93:01:de:ba:ea:be:f1:5a:29:60:78:cb:a2:15:19:c5:0d:
         fc:02:49:11:c6:76:96:cc:ce:03:f6:0a:0b:d3:08:e8:65:89:
         64:43:e1:cf:cc:b7:d0:67:49:7f:95:fb:23:15:59:97:db:6b:
         86:5e:5b:04:ba:87:4e:c2:09:cd:11:97:fa:7f:3b:50:66:79:
         1f:8a:2b:f0:47:2b:8d:1d:4a:35:26:73:98:02:d0:d8:10:49:
         e8:a1:74:69:d5:9c:47:23:9b:fe:72:1d:fb:c5:89:f0:12:f0:
         fc:31:e6:73:7f:3b:93:e4:66:dd:47:67:14:e7:ce:08:58:e7:
         39:f1:3a:4a:ea:5d:3b:6d:37:5a:cd:2f:26:8a:dd:dc:31:bf:
         f4:eb:8b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:48:26 2026 by rpki-client